Effective date: November 6, 2026 (UTC)
This Privacy Policy explains what information KERA GAMES ("we", "us") collects when you play 12 Warlords (the "Game"), how we use it, and the choices you have. By playing the Game you agree to this policy. If you do not agree, please do not use the Game.
1. Information we collect
1.1 Information you give us
- Account details: the username and password you choose. Passwords are stored only as a one-way cryptographic hash; we cannot read them.
- In-game content: your Sovereign name, alliance names and statements, chat messages, in-game mail, and bug reports you send us.
- Referral codes you create or enter.
1.2 Information collected automatically
- Device identifier: when you first open the Game, a guest account is created for your device. We store only a hashed (SHA-256) form of the device identifier, the platform (for example Windows, Android, iOS) and the device name reported by the system.
- IP address and approximate location: we keep the last few IP addresses used to sign in to your account, together with the country / region / city derived from them using an offline database, to protect your account and detect abuse.
- Session data: sign-in sessions and their last-used time.
- Gameplay data: progress, buildings, troops, items, battles, rankings, purchases and other in-game activity.
- Language and settings: your interface language and notification preferences.
- Notification token: if you allow notifications on Android, we store a token issued by Firebase Cloud Messaging so we can send notifications to your device. The token is removed when it stops being valid or when you delete your account.
- Advertising data (Android only): if you choose to watch a rewarded ad, Google AdMob may collect your device's advertising ID, device information and your interaction with the ad. We receive only a confirmation that the reward was earned.
1.3 Information from third parties
- Google Sign-In: if you link or sign in with Google, we receive your Google account ID, email address, and whether the email is verified. We do not receive your Google password and we do not access any other Google data.
- Google Play Games (Android): if you sign in with Google Play Games, we receive your Play Games player ID and display name.
- Google Play Billing (Android): if you buy through Google Play, we receive the order details, purchase token and status of your purchase. Payment details are handled by Google and are never shared with us.
- Facebook Login: if you link or sign in with Facebook, we receive your app-scoped Facebook user ID, your name and, if available, your email address (permissions public_profile and email). We do not receive your Facebook password, we do not post to Facebook, and we do not keep your Facebook access token after sign-in.
- PayPal: if you link PayPal or pay with PayPal, we receive your PayPal account ID, payer ID and email address, and the status and amount of your payments. Card and bank details are handled by PayPal and are never shared with us.
2. How we use information
- To create and keep your account, let you sign in on other devices and recover your progress.
- To run the Game: save progress, match players on servers, show rankings, deliver chat and mail.
- To process purchases, deliver purchased items, and handle refunds and disputes.
- To run the referral program and prevent abuse (for example, accounts sharing the same device are not counted).
- To translate chat messages and player mail into your language. Translation runs on our own servers; your messages are not sent to an outside translation service.
- To keep the Game safe and fair: detect cheating, fraud, spam and violations of our Terms of Service, and moderate chat.
- To answer your support requests and bug reports.
- To send in-game and device notifications you have turned on. For private messages and alliance chat, the notification includes the sender's alliance tag and Sovereign name and the beginning of the message, up to 100 characters, in its original language.
- To offer optional rewarded ads on Android and deliver their rewards.
We do not sell your personal information, and we do not build advertising profiles. Rewarded ads on Android are served by Google AdMob, which may use your advertising ID according to the ad consent choices available in your region and in your device settings.
3. What other players can see
Your Sovereign name, avatar, city on the world map, alliance, rankings, power and the chat messages you send are visible to other players. Your username, email, IP address and linked accounts are never shown to other players. Players you refer do not see your account, and you do not see theirs.
4. Sharing
We share information only with service providers that help us run the Game, and only as needed:
- PayPal — payment processing and PayPal sign-in.
- Google — Google sign-in and Google Play Games sign-in.
- Google (Firebase Cloud Messaging) — delivering notifications to Android devices. For private messages and alliance chat, this includes the sender's alliance tag and Sovereign name and the beginning of the message. Other notifications contain only the notification type and, for maintenance notices, the scheduled time. Undelivered notifications expire within about one hour.
- Google (AdMob) — serving rewarded ads on Android; AdMob receives the advertising ID and ad interaction data.
- Xsolla — payment processing for purchases made outside the app stores.
- Meta (Facebook) — Facebook sign-in.
- Cloudflare and our hosting providers — network delivery, security and server hosting.
- App stores (Google Play, Apple App Store) — when you install or buy through them.
We may also disclose information if required by law, to respond to valid legal requests, or to protect the rights and safety of our players and our company.
5. Retention
- Account and gameplay data are kept while your account exists.
- Chat messages are kept for a limited period and then deleted automatically.
- Purchase records are kept as long as required for accounting, tax and dispute purposes.
- When you request account deletion, your account is scheduled for deletion after 14 days; signing in during that time cancels the request. We then delete your characters and delete or anonymize your personal information, except what we must keep by law or to prevent fraud (for example purchase records).
6. Security
Connections to our servers are encrypted (HTTPS). Passwords are hashed, device identifiers and session secrets are stored only as hashes, and secret keys stay on our servers. No system is perfectly secure; please use a strong password that you do not use elsewhere.
7. Your choices and rights
- Guest accounts: a guest account is tied to your device. If you do not set a username and password or link an account, you may lose it when you change or reset your device.
- Linking: you can link or unlink Google, Facebook or PayPal in Settings → Account (as long as another sign-in method remains).
- Deleting your Facebook data: you can remove 12 Warlords from your Facebook account at any time (Facebook → Settings & privacy → Settings → Apps and websites → 12 Warlords → Remove); this unlinks Facebook from your game account. To delete the data we received from Facebook, choose Send request to delete data on the same page: we delete your Facebook ID, name and email from our systems, and Facebook shows you a confirmation code and a link where you can check the status. You can also email us (section 10) with the subject "Facebook data deletion". Your game account itself is kept unless you ask us to delete it.
- Notifications: you can turn each notification type on or off in Settings, or turn off all notifications for the Game in your device settings. If you turn off private message or alliance chat notifications, message content is no longer sent to Firebase Cloud Messaging for you.
- Ads (Android): rewarded ads are optional. Where required, you are asked for consent before ads are shown and can change your choice in the Game. You can also reset or delete your advertising ID in your device settings.
- Deleting your account: you can request deletion in the Game (Settings → Account) or on the web at https://api.12-warlords.com/xoa-tai-khoan.
- Access, correction, deletion: you may ask us for a copy of your data, to correct it, or to delete your account by contacting us (section 10). Depending on where you live (for example the EU/EEA, UK, or California), you may have additional rights under local law; we will honor them.
8. Children
The Game is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children under that age. If you believe a child has given us personal information, please contact us and we will delete it.
9. International transfers and changes
Our servers and service providers may be located outside your country. We protect your information as described in this policy wherever it is processed. We may update this policy; the new version will be posted here with a new effective date, and important changes will be shown in the Game, where you will be asked to accept them.
10. Contact
KERA GAMES
Website: https://www.12-warlords.com
Email: contact@12-warlords.com